Medium ALAS2023-2023-170 1 CVE

Moderate: ImageMagick security update (Amazon Linux 2023)

Published Apr 27, 2023 · Updated May 3, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-1906: Possible heap-based buffer overflow attack in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c for ImageMagick

Fixed packages 12

Release	Package	Fixed in
Amazon Linux · 2023	ImageMagick	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-c++	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-c++-debuginfo	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-c++-devel	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-debuginfo	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-debugsource	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-devel	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-doc	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-libs	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-libs-debuginfo	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-perl	1:6.9.12.82-1.amzn2023.0.2
Amazon Linux · 2023	ImageMagick-perl-debuginfo	1:6.9.12.82-1.amzn2023.0.2

Vulnerabilities 1

Medium 5.5

CVE-2023-1906

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/…

imagemagick imagemagick Debian Ubuntu

Apr 12, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-1906.html